How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the
users on her system?

A.
Annually

B.
Immediately after an employee is terminated

C.
Every five years

D.
Every time they patch the server

Explanation:
Reviewing the accesses and rights of the users on a system at least annually is acceptable
practice. More frequently would be desirable but too frequently would be a waste of administrative
time.